Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/Iz2Pae3vf_kz_6QhkLjxCkekNR4.roa
File: Iz2Pae3vf_kz_6QhkLjxCkekNR4.roa (raw, json)
Hash identifier: 3wEx225AWB6O/OE5GRGXbFVDv5uXzJGTGwFSKPIRnEs=
Subject key identifier: 23:3D:8F:69:ED:EF:7F:F9:33:FF:A4:21:90:B8:F1:0A:47:A4:35:1E
Certificate issuer: /CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Certificate serial: 01910E9DBEEF670AEBC9CE1EA1CADDDD7284
Authority key identifier: F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/Iz2Pae3vf_kz_6QhkLjxCkekNR4.roa
Signing time: Thu 01 Aug 2024 15:45:04 +0000
ROA not before: Thu 01 Aug 2024 15:45:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39217
IP address blocks: 185.98.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Sep 2024 10:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0e:9d:be:ef:67:0a:eb:c9:ce:1e:a1:ca:dd:dd:72:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Validity
Not Before: Aug 1 15:45:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=233d8f69edef7ff933ffa42190b8f10a47a4351e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bd:bd:db:b1:1f:86:ba:ef:79:fc:db:d8:c6:
a7:eb:42:f9:f4:c3:a8:41:a3:e5:ab:99:bd:04:60:
07:23:e0:aa:e1:25:91:48:b5:c4:69:ea:6a:0a:76:
ce:16:a2:54:68:96:8e:29:2e:15:2c:71:52:00:61:
26:cf:54:03:7e:f0:3a:50:11:df:6d:56:8b:1a:5f:
2b:b8:35:6c:d5:b7:dc:08:b8:ee:06:ab:10:d6:29:
7b:d0:ba:f1:ca:6c:29:d8:f9:48:1c:2a:11:a2:50:
54:39:2a:dd:f8:af:04:ea:4c:e4:9d:43:cc:ef:66:
bd:dc:6b:17:54:29:9c:41:c4:59:fc:68:e1:ec:fe:
39:cc:56:ca:7f:8d:60:1c:98:f8:2e:06:7d:41:31:
0c:df:ef:88:ed:47:5c:59:75:f8:6a:32:23:70:04:
6e:86:24:4a:ad:49:85:27:96:a0:81:e2:a5:17:23:
6d:a2:6b:b8:4c:5a:8c:a3:0f:bb:10:04:0d:7b:9b:
58:4b:0d:31:bc:bc:2b:d5:cf:24:42:b2:39:92:cd:
23:f4:5f:0f:c5:00:2b:dd:36:9e:c7:68:24:37:fe:
a1:ea:23:bf:7e:58:8f:5a:8e:8b:05:46:0a:a5:34:
9e:8b:53:65:5d:b1:4f:1a:ac:52:3d:1e:79:0a:b9:
aa:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3D:8F:69:ED:EF:7F:F9:33:FF:A4:21:90:B8:F1:0A:47:A4:35:1E
X509v3 Authority Key Identifier:
keyid:F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/Iz2Pae3vf_kz_6QhkLjxCkekNR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.75.0/24
Signature Algorithm: sha256WithRSAEncryption
14:1f:45:b9:66:64:a7:62:1a:ca:ff:2a:f7:a3:40:c2:55:b6:
7f:fb:98:e6:f5:ee:9c:1b:b7:16:99:28:8b:76:31:dd:45:f3:
37:36:10:bd:1b:ab:9b:53:c2:cc:fa:96:9c:b0:7c:18:94:38:
c5:50:e0:b3:b9:f9:e0:10:f9:fa:e5:f0:6c:8b:d4:58:40:49:
ee:0c:72:1c:a6:fd:a4:02:f7:ec:af:c9:d0:da:a5:12:4a:14:
5f:16:3e:7a:7d:c8:73:bc:a8:9b:70:69:7b:92:c9:2e:d4:7d:
29:7e:8c:ce:07:9f:f2:4b:73:9c:cd:f0:f3:26:84:7a:f1:43:
39:ef:24:2d:a2:4d:c6:3d:5e:97:cd:ff:9e:e0:63:85:12:31:
38:30:30:76:13:1f:73:ca:21:01:0f:64:4d:d7:70:41:a2:98:
07:d9:f1:d9:46:ac:8e:0d:71:c8:f3:05:1b:b1:41:c0:b0:1e:
b7:ab:c8:f3:05:73:6e:e3:fe:1f:63:18:7d:b4:aa:7e:6a:c0:
15:56:ea:8d:16:1a:11:ae:ec:55:ab:87:58:9f:70:d4:6d:22:
99:0b:cc:52:22:bf:1e:16:65:b9:6a:ef:0f:99:91:54:c9:5f:
d3:c1:5f:47:9f:99:05:6a:ad:74:2a:f3:5e:24:e0:79:70:dd:
e3:94:b5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:58 2025 by rpki-client